$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json) Hash identifier: 8vbgmAn/1MKb9IY3XdHoBJ3zALjThLMSBDPFCuVFH4A= Subject key identifier: 4B:7C:49:75:46:18:F3:D1:83:B7:F2:FE:7D:3B:EE:33:0D:3B:9E:D7 Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft Manifest number: 0195 Signing time: Sat 19 Jul 2025 03:47:25 +0000 Manifest this update: Sat 19 Jul 2025 03:47:25 +0000 Manifest next update: Sat 26 Jul 2025 03:47:25 +0000 Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: qOT9sAwUATFzUndh6aNRYgvpbwKr/bG1VtEG7Tw/ero=) 2: 5509870E6B6911EFA634B086C4F9AE02.roa (hash: Ha7uuCzrs6q52L6yqD5G/7/RQyqW/lnT9pM0rZZ1mMg=) 3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: JS7S95pwMMq4VJCG+rsKP1S3MhXCo+P6oTggAIuVIcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Validity Not Before: Jul 19 03:47:25 2025 GMT Not After : Jul 26 03:47:25 2025 GMT Subject: CN=687b154d-4c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:7c:4b:8b:07:3a:73:64:ab:a2:0a:95:cf: bc:60:2d:9f:db:e5:85:8e:e1:13:14:58:89:f0:fd: 0c:e4:cc:aa:67:24:cd:60:cc:a9:76:70:8f:40:0d: 60:31:5f:08:a5:c7:35:05:df:2c:f2:8c:5b:85:fb: 53:8a:e7:f0:f3:88:53:f6:13:85:fb:62:82:66:cb: a1:43:5f:07:dc:cd:4d:e6:1a:9f:4c:8b:f0:1a:11: 23:e9:be:98:2e:80:64:4c:62:b8:ec:50:f2:3f:cf: d9:1e:6c:c9:9f:8f:60:ed:d2:e9:e3:38:1a:fc:33: 8a:2d:3a:b8:78:b8:3f:b2:87:26:94:bc:b6:52:f3: 77:8f:89:96:6a:b8:61:b7:37:8f:0f:8f:b7:e7:0a: 24:33:48:2f:c9:bc:c2:29:cd:3b:cd:d6:63:ef:46: ec:8b:04:ba:57:2e:77:e8:4b:4c:b7:05:b6:9f:df: 79:75:24:44:fa:d9:66:c5:e9:73:01:43:df:6f:76: 87:5f:5b:ab:09:18:96:cd:78:2b:ee:d8:cc:83:23: c6:ec:6e:28:7f:f9:85:42:01:2b:e1:06:b1:85:b0: 74:b3:81:72:92:12:88:02:ce:9a:fe:c3:38:75:18: e7:4d:9b:4c:3a:4e:5b:fc:f6:32:02:c8:bd:30:1a: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:49:75:46:18:F3:D1:83:B7:F2:FE:7D:3B:EE:33:0D:3B:9E:D7 X509v3 Authority Key Identifier: keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:17:a1:21:61:ff:55:c4:9a:ad:a5:46:2e:62:e1:a6:4d:eb: fd:37:6d:27:73:f5:9d:17:76:e6:32:1b:65:d1:84:be:98:35: b1:52:92:bc:77:10:7c:ef:54:fe:82:c8:6c:22:ad:57:a8:d5: 2b:cd:82:80:06:34:16:2e:7c:1b:f2:43:f5:0e:ab:c0:32:36: 74:49:1f:2b:5a:6a:5d:53:a9:c7:2b:a5:28:ca:aa:f1:24:9f: 61:64:ae:ab:a8:02:6b:fb:56:c4:d4:5e:c2:10:39:76:4d:a9: 49:46:48:0b:9f:34:ef:80:4c:b6:50:d1:7e:73:28:e4:38:12: d9:6f:c4:47:90:d5:ef:9c:34:55:f1:cd:1b:84:17:3c:5d:23: 70:99:3f:75:c9:11:b7:1e:87:a1:3e:7f:43:9d:8c:83:d7:bd: 77:78:03:cf:10:09:0b:6b:6a:33:9b:2f:61:b1:48:d5:20:54: 3f:04:0a:26:5c:a4:5d:c2:20:d6:71:66:89:56:02:43:f6:2c: cd:77:e9:99:21:ec:3c:2f:46:86:6a:33:f9:57:e4:ab:53:8e: 0b:a8:f3:b4:cf:14:42:af:8b:7e:42:fb:a7:db:a3:2e:0b:e6: 27:cf:71:db:5a:55:bd:b9:2e:49:77:fd:98:ef:3a:c6:fd:3d: 8a:f3:cb:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0 RjZFRDJFNEEwHhcNMjUwNzE5MDM0NzI1WhcNMjUwNzI2MDM0NzI1WjAYMRYwFAYD VQQDEw02ODdiMTU0ZC00Yzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+l8S4sHOnNkq6IKlc+8YC2f2+WFjuETFFiJ8P0M5MyqZyTNYMypdnCPQA1g MV8Ipcc1Bd8s8oxbhftTiufw84hT9hOF+2KCZsuhQ18H3M1N5hqfTIvwGhEj6b6Y LoBkTGK47FDyP8/ZHmzJn49g7dLp4zga/DOKLTq4eLg/socmlLy2UvN3j4mWarhh tzePD4+35wokM0gvybzCKc07zdZj70bsiwS6Vy536EtMtwW2n995dSRE+tlmxelz AUPfb3aHX1urCRiWzXgr7tjMgyPG7G4of/mFQgEr4QaxhbB0s4FykhKIAs6a/sM4 dRjnTZtMOk5b/PYyAsi9MBqFDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEt8SXVG GPPRg7fy/n077jMNO57XMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU2QS80QzI4MUJCRTExQTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1f a0hPMUZNbkx2c05QYnRMa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJF6EhYf9VxJqtpUYuYuGmTev9N20nc/WdF3bmMhtl0YS+mDWxUpK8 dxB871T+gshsIq1XqNUrzYKABjQWLnwb8kP1DqvAMjZ0SR8rWmpdU6nHK6Uoyqrx JJ9hZK6rqAJr+1bE1F7CEDl2TalJRkgLnzTvgEy2UNF+cyjkOBLZb8RHkNXvnDRV 8c0bhBc8XSNwmT91yRG3HoehPn9DnYyD1713eAPPEAkLa2ozmy9hsUjVIFQ/BAom XKRdwiDWcWaJVgJD9izNd+mZIew8L0aGajP5V+SrU44LqPO0zxRCr4t+Qvun26Mu C+Ynz3HbWlW9uS5Jd/2Y7zrG/T2K88sK -----END CERTIFICATE-----Generated at Sun Jul 20 14:23:22 2025 by rpki-client